Manifest

$ rpki-client -vvvf rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
File:                     CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft (raw, json)
Hash identifier:          YsaKx7aQFZbXycrPD7nFd47YHytmrkn7wZ/nzRrcthc=
Subject key identifier:   AF:BC:D1:CE:3B:E5:C9:39:00:2B:13:4D:4F:D4:55:08:17:9A:19:3D
Authority key identifier: CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30
Certificate issuer:       /CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
Certificate serial:       394B0E4D61E6261AC04760E38F36DEC52846A9D8
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
Manifest number:          C4
Signing time:             Wed 23 Sep 2026 12:57:12 +0000
Manifest this update:     Wed 23 Sep 2026 12:52:12 +0000
Manifest next update:     Thu 24 Sep 2026 16:46:12 +0000
Files and hashes:         1: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: 9B18d/9Mq6o8AyxG94Kdqz2+xtB5eaKcmGvgMOaUWzk=)
                          2: CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl (hash: Kw3DTxHOKJoT+kapYzhfWTWRjwEgEvUG9wW/IQk6tZw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl
                          rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 16:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:4b:0e:4d:61:e6:26:1a:c0:47:60:e3:8f:36:de:c5:28:46:a9:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB72F7263B766AB1059ADFBA5B9193C2C5E58530
        Validity
            Not Before: Sep 23 12:52:12 2026 GMT
            Not After : Sep 24 16:46:12 2026 GMT
        Subject: CN=AFBCD1CE3BE5C939002B134D4FD45508179A193D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:d1:73:f9:5f:29:cd:67:87:6a:6b:bb:1e:
                    cf:ac:9d:35:11:3d:2d:4f:4e:ce:69:82:7b:e7:51:
                    7b:14:dd:d6:6b:8f:78:ff:29:10:bb:60:f0:66:d5:
                    cb:75:58:94:90:9a:03:82:73:5d:0c:3a:71:b9:ca:
                    e9:89:a3:d3:97:b1:81:e5:d6:7c:05:8a:a5:33:24:
                    9a:4b:5d:76:0a:84:58:a5:f3:b3:0e:e6:ed:4f:a3:
                    96:3f:f1:ff:68:4c:eb:46:b9:56:6a:6b:47:40:a7:
                    8a:92:de:48:80:f6:06:a4:8c:ba:8b:a2:8d:0a:2d:
                    75:a5:95:50:f6:cc:a8:83:51:39:a7:92:e6:3a:48:
                    c9:85:21:10:45:8a:8c:3b:2f:04:ef:30:1a:c8:2d:
                    d5:c8:be:6e:27:a3:8e:4b:91:86:90:0c:6a:a9:2c:
                    43:68:3b:9b:2a:7c:69:e3:db:57:5c:9f:94:63:e8:
                    69:55:65:55:92:15:3c:d4:fc:f4:dc:be:d7:60:73:
                    14:70:30:69:3c:a4:ed:29:88:01:73:3b:a9:cb:00:
                    3b:5d:50:47:33:33:20:b2:29:5a:a9:f3:74:26:84:
                    34:63:bc:1e:2f:2d:b4:67:9a:48:44:48:dc:91:cf:
                    e3:68:62:82:a3:38:a2:95:5a:a9:bc:e5:6e:08:09:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BC:D1:CE:3B:E5:C9:39:00:2B:13:4D:4F:D4:55:08:17:9A:19:3D
            X509v3 Authority Key Identifier:
                keyid:CB:72:F7:26:3B:76:6A:B1:05:9A:DF:BA:5B:91:93:C2:C5:E5:85:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/CB72F7263B766AB1059ADFBA5B9193C2C5E58530.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:69:4e:b8:f3:ff:9f:87:56:c1:30:db:f0:d4:5a:33:cd:c6:
         5a:97:68:a2:b9:23:45:1c:90:8d:24:4d:e5:b8:6a:79:1f:37:
         3a:ea:ae:b3:08:c6:6a:16:ee:9a:c9:bb:bb:7d:fc:95:d4:95:
         9f:1b:eb:74:5e:93:6d:7c:26:75:32:a0:5e:fc:66:76:b3:c0:
         3a:e3:6d:ad:4c:5c:e0:bc:41:7c:64:02:db:35:f1:53:bd:7b:
         c2:9a:0c:a6:be:95:3b:7d:4e:91:08:11:fb:84:d1:fb:66:fe:
         f0:41:51:15:34:b4:69:16:62:b7:08:d7:38:e2:8e:4b:52:0e:
         56:bf:b1:e5:82:2a:bf:96:c3:c7:58:de:29:84:96:ea:d8:f3:
         6a:1b:7a:49:ff:f4:ac:04:2a:1e:e1:c5:51:f9:8c:0e:e7:b2:
         88:e5:b2:21:2f:ba:45:be:d4:f2:b1:4d:36:c4:e9:08:e1:41:
         3f:96:ca:82:09:54:bc:40:4a:5e:f4:b0:fa:d1:af:05:c0:6c:
         3c:a5:1f:23:45:3d:5e:f3:df:a6:22:e8:76:20:68:9a:f4:bf:
         c8:88:5c:97:b5:f1:e5:b8:c1:9d:a0:4f:ca:3a:b3:f6:15:f2:
         e0:4f:2c:05:91:97:ff:c3:fa:1d:08:5d:19:38:03:0b:41:71:
         b0:bd:ac:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:35:43 2026 by rpki-client